ropshell> use 18403538a12facf8aced1dcfcccef1ba (download)
name         : libcrypto.so.1.0.0 (x86_64/ELF)
base address : 0x61e00
total gadgets: 13436

ropshell> suggest "load reg"
> 0x00066fe5 : pop rax; ret
> 0x00061ffa : pop rbx; ret
> 0x00138973 : pop rcx; ret 9
> 0x000aef53 : pop rdx; ret
> 0x000629c8 : pop rsi; ret
> 0x00063153 : pop rdi; ret
> 0x00061f10 : pop rbp; ret
> 0x000622dd : pop rsp; ret
> 0x000d2a22 : pop r8; ret
> 0x000622dc : pop r12; ret
> 0x00062e85 : pop r13; ret
> 0x000629c7 : pop r14; ret
> 0x00063152 : pop r15; ret
> 0x000fd75e : mov rax, [rsp + 8]; add rsp, 0x18; ret
> 0x000b4b5b : mov rcx, [rsp]; call rax
> 0x000b24bf : mov rdx, [rsp]; call r12
> 0x0013847c : mov rdi, [rsp]; call r13
> 0x000d59b2 : mov r9, [rsp]; call r9
> 0x000d5a08 : mov r10, [rsp]; call r10
> 0x000fd75f : mov eax, [rsp + 8]; add rsp, 0x18; ret
> 0x000d59b3 : mov ecx, [rsp]; call r9
> 0x000d5a09 : mov edx, [rsp]; call r10
> 0x0013847d : mov edi, [rsp]; call r13
> 0x00103846 : mov rsi, [rsp + 0x28]; call rax
> 0x000d60a2 : mov rbp, [rsp + 0x10]; call rbp
> 0x000d5e3d : mov r11, [rsp + 0x10]; call r11
> 0x000d5e3e : mov ebx, [rsp + 0x10]; call r11
> 0x00103847 : mov esi, [rsp + 0x28]; call rax
> 0x000d60a3 : mov ebp, [rsp + 0x10]; call rbp
> 0x000b335b : mov r8, [rsp + 8]; mov rcx, r15; call r12
> 0x000d60b1 : mov r13, [rsp + 0x50]; mov r8, rbx; mov rdx, [rsp + 0x40]; mov rdi, r12; mov rcx, r13; mov rsi, r13; call rbp
> 0x000b52d3 : mov r14, [rsp + 0x20]; lea rdi, [r15 + 0x10]; mov [rsp + 8], r9; mov rsi, rdi; mov rdx, r14; call rbx